realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libcdio-debuginfoUpgrade libcdio-develUpgrade libcdio | Apr 27, 2020 | Feb 24, 2018 |
| Centos_linux | — | Upgrade libcdio-debuginfoUpgrade libcdio-develUpgrade libcdio | Aug 28, 2019 | Feb 24, 2018 |
| Debian | — | Upgrade libcdio | Jul 30, 2024 | Feb 24, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libcdio | Dec 31, 2018 | Feb 24, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libcdio | Dec 11, 2018 | Feb 24, 2018 |
| Oracle_linux | — | Upgrade libcdio-develUpgrade libcdio | Nov 6, 2018 | Feb 27, 2018 |
| Redhat_linux | — | Upgrade libcdio-debuginfoNo solution existsUpgrade libcdioUpgrade libcdio-devel | Oct 31, 2018 | Feb 24, 2018 |
| Suse | — | Upgrade libcdio++0-32bitUpgrade libcdio19Upgrade libiso9660-10-32bitUpgrade libiso9660-11Upgrade libudf0-32bitUpgrade libudf0Upgrade libcdio++0Upgrade libcdio14-32bitUpgrade libcdio14Upgrade libiso9660-10Upgrade libcdio-develUpgrade libcdio16Upgrade libcdio16-32bitUpgrade cdio-utilsUpgrade libiso9660-8 | Aug 10, 2018 | Feb 24, 2018 |
| Ubuntu | — | Upgrade libiso9660-8 (Ubuntu Pro)Upgrade libudf0 (Ubuntu Pro)Upgrade libcdio13 (Ubuntu Pro)Upgrade libcdio-paranoia1 (Ubuntu Pro)Upgrade libcdio-cdda1 (Ubuntu Pro)Upgrade libcdio-utils (Ubuntu Pro) | Aug 10, 2022 | Feb 24, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub